Privacy policy

Last updated: 2026-07-30

Curbside is a browser extension that evaluates a Facebook Marketplace vehicle listing you are actively viewing, at your request. This page describes what data the extension and its backend collect, why, and what they never touch.

Nothing happens until you click

The extension does not run in the background, does not poll or monitor listings, and does not act while you are simply browsing Marketplace. Every capture is the direct result of you clicking “Capture listing” on a page you already have open.

What is collected from a listing

When you click Capture, the extension reads the vehicle listing you are viewing — price, mileage, year, make, model, title status if stated, description text, photo count, posted date, location, and (if present in the listing) the VIN — plus the result cards from one comparable-listings search for that vehicle. This is sent to the Curbside backend to compute an expected-price assessment.

Facebook Marketplace shows asking prices, not sale prices. Everything Curbside produces describes how similar vehicles are advertised, not what they actually sell for.

What is collected about sellers

An irreversible hash of the seller’s Facebook identifier, a count of their other active vehicle listings, and the star rating and rating count Marketplace already displays on the listing itself. The extension never reads or transmits seller display names, profile URLs, profile photos, or account join dates — the hash and the numbers above are the only things that identify a seller at all, which minimizes what leaves your browser without making it anonymous: the hash is stable, so the same seller is recognizably the same seller across listings, even though nothing in it can be reversed back to a name or profile.

Phone numbers and email addresses that appear in a listing’s description text are replaced with [PHONE] and [EMAIL] before the description ever leaves your browser, and are redacted again on the backend as a second check.

VIN decoding and recall data

If a listing includes a VIN, it may be sent to NHTSA’s free, keyless vPIC and recall APIs to decode the vehicle’s trim/engine/drivetrain and to look up recall campaigns issued for that year, make and model. That is a narrower thing than confirming this specific car’s recalls were fixed: NHTSA’s free public data says which campaigns exist for the model, not which of them this VIN had performed. NHTSA does not require or receive any information about you.

The one AI call this product makes

For the “what to check on this car” section, the backend may send a vehicle’s year, make, model, trim, and a mileage band to Anthropic’s Claude API to retrieve a qualitative summary of known issues for that vehicle. This call never includes the listing’s description, price, location, photos, VIN, or any seller information — only those five vehicle-identity fields. Responses are cached by that same key, so most evaluations reuse a previous answer rather than making a new call.

Data retention

Captured listing data is stored as a time-stamped record, and the backend defines a retention window (currently 400 days) and a deletion tool that removes observations past it. That tool is a script an operator runs — it is not something the application triggers automatically on its own, so whether it is actually being run on a schedule at any given time is an operational fact this page cannot promise you, only the code that makes it possible. Deleting the underlying capture does not touch a saved evaluation you’ve bookmarked: the snapshot you saved stays visible, it just loses the ability to be re-checked against the original observation once that’s gone. None of this data is sold, rented, or shared with third parties for advertising or any purpose unrelated to producing your evaluation.

A note on Facebook’s terms of service

Collecting listing data from Facebook Marketplace with a tool like this is against Meta’s terms of service, regardless of the fact that it runs in your own browser under your own session. Facebook may restrict or suspend your account as a result. That risk is yours, not the extension’s, and you should understand it before using Curbside.

Contact

Questions about this policy or your data can be sent to support@curbsidescore.com.